-
Type: Bug
-
Status: Resolved
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 2.2.8, 2.3.1
-
Component/s: UI, User & Group management
-
Tags:
-
Sprint:nxGang Sprint 10.2.6
-
Story Points:2
When there is a policy password such as REGEX against which the password is tested, trying to change the password through the UI with an incorrect password is not correctly handled by UI.
We should instead:
- Notify the user (either administrator or the user itself trying to change pwd) WITHIN the modal about what is going wrong
- For regex, we should be able to define an error message to display to the end-user.
Reproductions steps for a user changing his password:
- Add the following XML as a contribution toward a Studio project
- Log in with a user
- Go to user settings/Change password
- Try a password not allowed by the REGEX, for example: "password"
- Click on "Save changes"
- The modal is being closed and a toast displays "An error occured while changing password"
Reproductions steps for n administrator changing another one password:
- Add the following XML as a contribution toward a Studio project
- Login with Administrator user
- Go to Administration/User&Groups
- Select a user
- Click sur "Change password"
- Try a password not allowed by the REGEX, for example: "password"
- Click on "Save changes"
- The modal is being closed without displaying an error
<extension point="userManager" target="org.nuxeo.ecm.platform.usermanager.UserService"> <userManager> <userPasswordPattern>(?=.{9,})(?=.*[A-Z])(?=.*[a-z])(?=.*[0-9])(?=.*\p{Punct}).*</userPasswordPattern> </userManager> </extension>
- is related to
-
NXP-25024 Display reason with password change failed
- Open